NVIDIA (ChatRTX) Products March 2024 Security Update Advisory

Overview

 

NVIDIA(https://www.nvidia.com) has released a security update that addresses a vulnerability in products it has been made. users of affected products are advised to update to the latest version.

 

Affected Products

 

ChatRTX 0.2, prior versions

 

Resolved Vulnerabilities

 

UI vulnerability in NVIDIA ChatRTX for Windows that allows an attacker to send an open file request to the application, resulting in improper permission management (CVE-2024-0082)

UI vulnerability in NVIDIA ChatRTX for Windows that could allow an attacker to cause a cross-site scripting error on the network by executing malicious script in the user’s browser. (CVE-2024-0083)

 

Vulnerability Patches

 

The following product-specific Vulnerability Patches were made available in the 03/26/2024 update. For more information on Vulnerability Patches, please refer to the “Security Updates” section of the product-specific Referenced Sites documentation.

ChatRTX 0.2 (ChatWithRTX_installer_3_5.zip) version

 

Referenced Sites

 

[1] NVIDIA ChatRTX – March 2024

https://nvidia.custhelp.com/app/answers/detail/a_id/5532